Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa
File:                     F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (raw, json)
Hash identifier:          +sUGjUzklaHkDx1+tYPnVEh2t1t6I+IkTvFT5vdfme8=
Subject key identifier:   D5:55:49:4A:AA:7E:93:AA:9C:C8:60:6F:91:29:B9:7E:10:4A:A7:D8
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       133D
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:46:03 +0000
ROA not before:           Fri 22 Aug 2025 17:25:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45766
IP address blocks:        103.113.152.0/22 maxlen: 22
                          103.113.152.0/23 maxlen: 23
                          103.113.152.0/24 maxlen: 24
                          103.113.153.0/24 maxlen: 24
                          103.113.154.0/23 maxlen: 23
                          103.113.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4925 (0x133d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Aug 22 17:25:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4431b-f154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:b6:90:78:ee:24:4c:74:d1:62:1d:a3:e5:
                    df:af:0a:8b:ab:d2:e3:55:9a:86:e4:37:87:c3:5b:
                    57:63:f0:34:ae:76:2d:2b:b6:bb:2e:86:10:0c:23:
                    49:72:30:4b:7f:0d:54:06:49:dc:b0:15:69:12:40:
                    68:d6:82:46:34:26:cb:2e:23:fe:c3:b6:18:50:a9:
                    c1:f2:64:7a:f4:eb:9d:27:8a:02:f9:eb:e7:0d:39:
                    25:ab:ff:c1:95:77:c4:d1:93:65:20:a8:95:01:cf:
                    08:55:26:42:dc:25:da:3b:97:32:c0:50:22:af:ef:
                    04:ef:f9:5b:7d:d9:cb:6f:e4:b2:f5:a6:dc:64:44:
                    97:09:03:dc:10:1a:59:b1:93:fc:45:d8:8e:e8:27:
                    d6:4c:92:c1:b4:ae:8c:6e:c1:1a:1c:88:00:da:d5:
                    1e:f5:6a:35:0a:ef:e1:ff:b2:2a:15:09:4b:33:02:
                    7c:64:ab:4c:12:0b:59:e8:e8:51:b8:7f:c1:b4:da:
                    75:5e:66:60:e3:e9:93:f8:a1:16:41:b5:ba:3d:dc:
                    12:2e:80:a5:cd:32:9c:1a:9e:f1:3d:e5:72:43:57:
                    e7:97:c0:b7:70:ed:50:10:bf:8b:ab:89:c1:ed:bf:
                    b5:43:5c:70:dc:26:83:20:6e:d5:98:ff:46:47:5e:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:55:49:4A:AA:7E:93:AA:9C:C8:60:6F:91:29:B9:7E:10:4A:A7:D8
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:d8:fd:f7:18:e4:88:6f:2c:e1:4e:33:97:cc:69:31:6d:
         a1:57:89:f9:32:7e:41:b2:6c:b9:8f:8a:88:a7:c8:bc:b0:f7:
         8a:85:bc:b1:de:14:0f:c3:41:42:e6:ff:18:f9:15:ef:78:5d:
         e6:04:fc:da:80:f7:07:52:ae:fd:fe:49:4d:f7:ed:e0:0b:87:
         6e:bb:d8:88:97:09:80:a3:29:de:e5:8c:8d:f1:90:14:23:f0:
         1f:2d:ac:41:cc:28:c6:db:5d:14:56:80:ac:9d:24:ff:c7:67:
         73:75:ba:ee:5d:18:60:10:f2:7f:54:29:6b:70:73:1d:d1:18:
         9c:cf:30:27:b1:3f:95:90:0a:06:51:30:1a:70:b4:92:aa:52:
         97:5b:cc:e1:e4:f4:26:ca:4a:64:2c:1c:a3:0c:66:25:17:86:
         ce:b6:8b:f8:bb:c4:fe:ff:ee:14:92:5d:65:82:19:02:71:fa:
         26:ed:60:10:3c:44:a9:84:7d:35:a1:18:cd:01:b1:e3:24:9a:
         a5:a4:b9:6f:86:73:36:92:cf:71:d2:68:73:4d:07:c8:5a:e7:
         a4:68:6b:55:54:3d:0d:49:a9:3d:77:22:81:79:b3:bc:8c:30:
         b5:2c:b2:c1:02:f9:54:c3:68:ea:f5:96:73:13:f4:4f:36:ab:
         d9:11:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:51 2026 by rpki-client